CVE-2004-2167

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• LaTeX2rtf 1.9.15 - Remote Buffer Overflow2004-09-21 · remote · linux · Verified

Impact

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.

Affected products

References

• NVD record
• CVE.org record
• http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log
• http://www.osvdb.org/displayvuln.php?osvdb_id=10216
• http://www.securityfocus.com/bid/11233
• http://www.securitytracker.com/alerts/2004/Sep/1011367.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17460
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17487
• http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log
• http://www.osvdb.org/displayvuln.php?osvdb_id=10216
• http://www.securityfocus.com/bid/11233
• http://www.securitytracker.com/alerts/2004/Sep/1011367.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17460
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17487